Professional Documents
Culture Documents
Ghost Er
Ghost Er
Frame
Logical Addr
Module
0x000000000012d450 0x0001:0x00000000000454f4 C:\Windows\SYSTE
0x000000000012d454 0x0000:0x0000000000000000
0x000000000012d740 0x0001:0x00000000000c1619 E:\Master\XP Min
0x000000000012d8c4 0x0001:0x000000000000d145 E:\Master\XP Min
0x000000000012e954 0x0001:0x000000000000d4d0 E:\Master\XP Min
0x000000000012efbc 0x0001:0x000000000000d682 E:\Master\XP Min
0x000000000012f1d4 0x0001:0x000000000000daba E:\Master\XP Min
0x000000000012f210 0x0001:0x000000000001531b E:\Master\XP Min
0x000000000012f44c 0x0001:0x000000000006bcfb E:\Master\XP Min
0x000000000046d528
i USB\GHOST32.EXE
0x000000000046e899
i USB\GHOST32.EXE
0x000000000046e9c6
i USB\GHOST32.EXE
0x000000000046ebf1
i USB\GHOST32.EXE
0x0000000000401213
i USB\GHOST32.EXE
0x0000000000456b70
i USB\GHOST32.EXE
0x0000000000406459
i USB\GHOST32.EXE
0x000000000040670f
i USB\GHOST32.EXE
0x0000000000404da3
i USB\GHOST32.EXE
0x000000000045726f
i USB\GHOST32.EXE
0x0000000000457751
i USB\GHOST32.EXE
0x0000000000457cfd
i USB\GHOST32.EXE
0x000000000049b2de
i USB\GHOST32.EXE
0x00000000759a1174
m32\kernel32.dll
0x0000000076dfb3f5
M32\ntdll.dll
0x0000000076dfb3c8
M32\ntdll.dll
End Call Stack
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............3
version..................0x0400
volsize..................391230944
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....391230944
pagefileSys..............4294967295
bootIni..................4294967295
volumeLabel..............[Galeri]
sectorsInUse.............56152144
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........1493
bitmapUsedBytes..........6112984
estimatedClusters........1493
estimatedUsedBytes.......6112984
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........63
volsize_lo..............391230944
volsize_hi..............0
mftcluster.(lo).........786432
mftcluster.(hi).........0
mftmirrorcluster.(lo)...16
mftmirrorcluster.(hi)...0
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
--------------------------------------------------Cluster Allocation Map
--------------------------------------------------Start: 48903868 Length:
0 Next: 48903868
=======================================================
=======================================================
NTFS volume 1:
----------------
initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............2
version..................0x0400
volsize..................368646143
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....368646143
pagefileSys..............4294967295
bootIni..................4294967295
volumeLabel..............[Data]
sectorsInUse.............2626816
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........1407
bitmapUsedBytes..........5760096
estimatedClusters........1407
estimatedUsedBytes.......5760096
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........204802048
volsize_lo..............368646143
volsize_hi..............0
mftcluster.(lo).........786432
mftcluster.(hi).........0
mftmirrorcluster.(lo)...16
mftmirrorcluster.(hi)...0
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
--------------------------------------------------Cluster Allocation Map
--------------------------------------------------Start: 46080767 Length:
0 Next: 46080767
=======================================================
=======================================================
NTFS volume 2:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............1
version..................0x0400
volsize..................204595199
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....204595199
pagefileSys..............4294967295
bootIni..................4294967295
volumeLabel..............[Windows7]
sectorsInUse.............70769240
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........781
bitmapUsedBytes..........3196800
estimatedClusters........781
estimatedUsedBytes.......3196800
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........206848
volsize_lo..............204595199
volsize_hi..............0
mftcluster.(lo).........786432
mftcluster.(hi).........0
mftmirrorcluster.(lo)...16
mftmirrorcluster.(hi)...0
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
--------------------------------------------------Cluster Allocation Map
--------------------------------------------------Start: 25574399 Length:
0 Next: 25574399
=======================================================
=======================================================
NTFS volume 3:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............0
version..................0x0400
volsize..................204799
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....204799
pagefileSys..............4294967295
bootIni..................4294967295
volumeLabel..............[System Res]
sectorsInUse.............51224
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........1
bitmapUsedBytes..........3200
estimatedClusters........1
estimatedUsedBytes.......3200
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........2048
volsize_lo..............204799
volsize_hi..............0
mftcluster.(lo).........8533
mftcluster.(hi).........0
mftmirrorcluster.(lo)...16
mftmirrorcluster.(hi)...0
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
Num
Last
Used
Fixed Drives
Drive 0 ST500DM0 02-1BD142 KC45
ASPI
Total Sectors
964689920
Bytes per Sector 512
MB
471040
WinNT (Active)
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track
964689920
512
471040
60049
255
63
Z3T3Z469
NTFS
Floppy Drives
Remote Drives
AsyncIo : 0
Image Devices
Key
Path
Desc
Type
Disk
Offset
C:
C:
[Windows7]
Disk
0
206848
Key
Path
Desc
Type
Disk
Offset
D:
D:
[Data]
Disk
0
204802048
Key
Path
Desc
Type
Disk
Offset
E:
E:
[Galeri]
Disk
0
573456240
Key
Path
Desc
Type
F:
F:
Key
Path
Desc
Type
H:
H:
Key
Path
Desc
J:
J:
CD
Floppy
Type
Disk
Offset
Floppy
2
0
*********************************